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Abstract 

State conversion generalizes query complexity to the problem of converting between two 
input-dependent quantum states by making queries to the input. We characterize the complexity 
of this problem by introducing a natural information-theoretic norm that extends the Schur 
product operator norm. The complexity of converting between two systems of states is given by 
the distance between them, as measured by this norm. 

In the special case of function evaluation, the norm is closely related to the general adversary 
bound, a semi-definite program that lower-bounds the number of input queries needed by a 
quantum algorithm to evaluate a function. We thus obtain that the general adversary bound 
characterizes the quantum query complexity of any function whatsoever. This generalizes and 
simplifies the proof of the same result in the case of boolean input and output. Also in the 
case of function evaluation, we show that our norm satisfies a remarkable composition property, 
implying that the quantum query complexity of the composition of two functions is at most the 
product of the query complexities of the functions, up to a constant. Finally, our result implies 
that discrete and continuous-time query models are equivalent in the bounded-error setting, even 
for the general state-conversion problem. 

1 Introduction 

A quantum query algorithm for evaluating a function / attempts to compute f(x) with as few 
queries to the input x as possible. Equivalently, the algorithm begins in a state |0), and should 
approach |/(a;)) <£> |0). The state- conversion problem generalizes function evaluation to the case 
where the algorithm begins in a state \p x ) and the goal is to convert this to \cr x ). State-conversion 
problems arise naturally in algorithm design, generalizing classical subroutines (Figure 1). For 
example, the graph isomorphism problem can be reduced to creating a certain quantum state [Shi02] . 

We characterize the quantum query complexity of state conversion. We introduce a natural, 
information-theoretic norm, which extends the Schur product operator norm. The complexity 
of state conversion depends only on the Gram matrices of the sets of vectors {(/Ox)} and {|cr x )}, 
and is characterized as the norm of the difference between these Gram matrices. For example, in 
function evaluation, the initial Gram matrix is the all-ones matrix, J, and the target Gram matrix 
is F = {5 f(x),f(y)}x,y, so the query complexity depends only on the norm of F — J. Characterizing 
query complexity in terms of a norm-induced metric has interesting consequences. For example, it 
follows that if one can design an optimal algorithm for going from J to + jj^jFi then one also 
obtains an optimal algorithm for evaluating /. 

The norm we introduce is related to the general adversary bound [HLS07], a strengthening of 
the popular adversary method for showing lower bounds on quantum query complexity [Amb02]. 
A recent sequence of works [FGG08, CCJY09, ACR + 10, RS08] has culminated in showing that 
the general adversary bound gives, up to a constant factor, the bounded-error quantum query 



1 



complexity of any function with boolean output and binary input alphabet [Rei09, Reill]. Our 
more general state-conversion result completes this picture by showing that the general adversary 
bound characterizes the bounded-error quantum query complexity of any function whatsoever: 

Theorem 1.1. Let f : T> — >• E, where T> C D n , and D and E are finite sets. Then the bounded-error 
quantum query complexity of f , Q(f), is characterized by the general adversary bound, Adv ± (/): 

g(/) = e(Adv ± (/)) . (i.i) 

The general adversary bound is a semi-definite program (SDP). When phrased as a minimization 
problem, Adv =t (/) only has constraints on x,y pairs where f(x) ^ f(y)- In contrast, we consider 
an SDP that places constraints on all input pairs x,y. Fortunately, these extra constraints increase 
the optimal value by at most a factor of two. The extra constraints, however, are crucial for the 
construction of the algorithm, and for any extension to state conversion. They also lead to a new 
conceptual understanding of the adversary bound. 

The modified SDP defines a norm, and we define the query distance as the metric induced 
by this new norm. Our main algorithmic theorem states that there is a quantum algorithm that 
converts \p x ) to a state with high fidelity to \o~ x ), and that makes a number of queries of order the 
query distance between p and a, the respective Gram matrices of {|/0x)} and {|cr x )}. 

The correctness of our algorithm has a direct and particularly simple proof. Though more general, 
it simplifies the previous characterization of boolean function evaluation. At its mathematical heart 
is a lemma that gives an "effective" spectral gap for the product of two reflections. 

The query distance also gives lower bounds on the query complexity of state conversion. It is 
straightforward to argue that the query distance between p and a lower bounds the number of 
queries needed to reach a exactly. To deal with the bounded-error case, we look at the minimum 
over all a' of the query distance between p and a' , where a' is a valid Gram matrix for the final 
states of a successful algorithm. We show that a simpler necessary and sufficient condition for the 
latter is that a and a' are close in the distance induced by the Schur product operator norm. 

As the query distance remains a lower bound on the continuous-time query complexity, a corollary 
of our algorithm is that the continuous-time and discrete query models are related up to a constant 
factor in the bounded-error setting. Previously, this equivalence was known up to a sub-logarithmic 
factor [CGM+09]. 

Since the general adversary bound characterizes quantum query complexity, its properties 
immediately carry over thereto. We show that the general adversary bound satisfies a remarkable 
composition property, that Adv 1 * 1 of a composed function f ° (g, g, ■ ■ ■ ,g) is 0(Adv ± (f)Adv ± (g)) . 
Previously this was known in the boolean case [Rei09], and, again, having constraints on all input 
pairs turns out to be crucial in the extension to non-boolean functions. When the input of / is 
boolean, we can show a matching lower bound, extending [HLS07]. 

2 Background 

For a natural number n, let [n] = {1,2, . . . ,n}. For two matrices A, B of the same size, Ao B 
denotes their entrywise product, also known as Schur or Hadamard product. Let (A, B) = Tr(A^B). 
Denote by ||^4|| the spectral norm of A. We will use 1 and J for the identity and all-ones matrices, 
respectively, where size can be inferred from the context. Let 5 a b be the Kronecker delta function. 
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Figure 1: The state-conversion problem generalizes the state-generation problem, studied by 
Ambainis et al. [AMRR11], which in turn generalizes function evaluation. The quantum query 
complexity of evaluating boolean functions has been characterized by [Reill]. 



2.1 Coherent and non-coherent state-conversion problems 

The quantum query complexity of a function /, Q(f), is the number of input queries needed to 
evaluate / with error at most 1/3 [BW02]. The state-conversion problem generalizes function 
evaluation to the case where the aim is to transform one quantum state into another, using queries 
to the input. The problem is parameterized by sets of states {|/? x )} and On input x, we 

begin in a state \p x ) and wish to create the state \o~ x ), using as few queries to x as possible. State 
conversion is a slight generalization of the state- generation problem, in which in the initial state \p x ) 
is independent of x. This problem was introduced by Shi [Shi02], and recently studied systematically 
by Ambainis et al. [AMRR11]. 

State conversion has two variants, coherent and non-coherent. Both versions allow the algorithm 
workspace. 

Definition 2.1 (Coherent output condition). An algorithm solves the coherent state- conversion 
problem with error e if for every x it replaces the initial state \p x ) ® |0) by a state \o' x ) such that 

Re(KI(kz}<s>|o)))>vT^. 

Definition 2.2 (Non-coherent output condition). An algorithm solves the non-coherent state- 
conversion problem with error e if for every x it replaces the initial state \p x ) ® |0) by a state \a' x ) 
such that \(o~ x \(\a x ) (g) \s x ))\ > \A — 6 f or some state \s x ) that may depend on x. 

The query complexity of state conversion only depends on the Gram matrices of the initial 
and target states, i.e., on p = {{px\Py)}x,y an d er = {{o~ x \o- y )} x ,y (In function evaluation and state 
generation, p is the all-ones matrix.) Let Q e (p,a) and Q™ c (p,a) be the minimum number of queries 
required to solve the coherent and non-coherent state-conversion problems, respectively, with error e. 

For evaluating functions, coherent and non-coherent complexities are equal up to constant factors. 
An example that illustrates the difference between these output conditions is computing a boolean 
function in the phase, that is where the target state \a x ) = (— 1)^W|0). In this case the non-coherent 
complexity is trivial, while the bounded-error coherent complexity is equal to Q(f), up to constant 
factors. 
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2.2 The 72 norm 

We will make use of the 72 norm, also known as the Schur product operator norm [Bha07, LSS08]. 
This norm has been introduced recently to complexity theory by Linial et al. [LMSS07], and has 
proven to be very useful in quantum information. It is currently the best lower bound known on 
quantum communication [LS09], and Tsirelson has shown that its dual norm characterizes the bias 
of a quantum XOR game [Tsi87, Ung08]. 

Definition 2.3. Let A be matrix with rows labeled by T>\ and columns by T>2- Define 

72(A) = min \ m&x{m&x\\\u x )\\ 2 ,m&x\\\vy}\\ 2 } :\/x £Vi,y £V 2 , A XtV = (u x \v y } \ . (2.1) 
meN, xeT>i y£T> 2 ) 

K),K)eC m 

The following fact plays a key role in the design of our algorithm and in relating our new norm 
to the general adversary bound: 

Fact 2.4. For any k G N, let 1 and J be the k-by-k identity and all-ones matrices, respectively. 
Then 7 2 (J- 1) < 2(1 - 1/k). 



Proof. We demonstrate unit vectors {\m)}i£[k] , and {|fi)}i6[fci such that {m\vj) = §F?a(l ~~ ^ 
v'EZr U\ l„.\ — */l _ ™2l„-\ j a l„-\ . / 1 Vk~-i 
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let = -a\i) + ^ Wi) = VT^\i) + ^ Y,j# fo« = VrT- D 

3 Filtered 72 norm and query distance 

We define a natural generalization of the 72 norm, in which the factorization is filtered through 
certain matrices: 

Definition 3.1 (Filtered 72 norm). Let A be a matrix with rows indexed by elements ofD\ and 
columns by T>%, and let Z = {Z\, . . . , Z n } be a set of \V1\-by-\V2\ matrices. Define 72(A|Z) by 



7 2 (j4|Z) = min max< max II |u T1 ) II 2 , max 

Vx G T>i,y G V 2 , A x , y = y^( Z j)x,y{u x j\vyj) 



u xj ),\v yj )ec™ ' 3 (3A) 



The filtered 72 norm 72 ( • | Z) is a norm. Among its many properties (see Appendix A) are that 
72(A) = 72(A|{ J}), where J is the all-ones matrix, and 72(A|{A}) = 1 if A / 0. We use below the 
general inequality 

7 2 (A\{Z J }) < ° B}) l2 {B) • (3.2) 

The query distance is the metric induced when the filter matrices are related to the query process. 
Let V C D n be a finite set, and let A = {Ai, . . . , A n }, where Aj = {1 — 8 X j,yj}x,yeD- Thus Aj 
encodes when a query to index j distinguishes input x from input y. 

Definition 3.2. The query distance between p and a, two \V\-by-\V\ matrices, is 72 (p — o~\A). 
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Theorem 4.9 below shows that the query distance characterizes the quantum query complexity of 
state conversion. Furthermore, as we show now, it is closely related to the general adversary bound, 
a lower bound on the quantum query complexity for function evaluation introduced by [HLS07]. 
Let / : V -> E and let F = {5f( x ),f(y)}x,y 

Definition 3.3. The general adversary bound for f is given by 

Adv ± (/) = max|||r|| : Vj 6 [n], \\T o Aj\\ < lj , (3.3) 

where the maximization is over \T>\-by-\T>\ real, symmetric matrices T satisfying T o F = 0. 

By taking the dual of this SDP, we obtain a bound that is the same as 72(J — F\A), ex- 
cept without any constraints on pairs x,y with f(x) = f(y). In other words, Adv =t (/) = 
72 (J-F|{A j0 (J-F)}). 

Theorem 3.4. The values of the general adversary bound and j2(J — F\A) differ by at most a 
factor of two, and are equal in the case that the function has boolean output: 

Adv ± (/) < 72 (J - F\A) < 2(1 - l/| J B|)Adv ± (/) . 

Proof. Since Adv ± (/) has fewer constraints as a minimization problem, Adv =t (/) < 72 (J — F\A). 

For the other direction, use Eq. (3.2) with Zj = Aj, A = B = J — F = Ao B. As it is readily 
seen that 72 is invariant under adding or removing duplicate rows or columns, Fact 2.4 implies 
12{J-F)< 2(1 -l/\E\). □ 

4 Characterization of quantum query complexity 

In this section, we show that the query complexities for function evaluation, and coherent and 
non-coherent state conversion are characterized in terms of 72 and 72 (-| A). We begin with the upper 
bounds. 

4.1 Quantum query algorithm for state conversion 

Theorem 4.1. Consider the problem of converting states {\p x )} to {\o~ x )}, for ifPC D n . Let p 
and a be the states' Gram matrices. For any e G (0,7 2 (/9 — <r|A)), this problem has query complexity 

Q e (p,a) = o( 72 (p-a|A)^M) . 

Theorem 1.1 follows from Theorems 3.4 and 4.1, together with the lower bound from [HLS07]. 

The mathematical heart of our analysis is to study the spectrum of the product of two reflections. 
The following lemma gives an "effective" spectral gap for two reflections applied to a vector. It is 
closely related to [Rei09, Theorem 8.7], but has a significantly simpler statement and proof. 

Lemma 4.2 (Effective spectral gap lemma). Let H and A be projections, and let R = (211— 1)(2A— 1) 

be the product of the reflections about their ranges. Let {|/3)} be a complete orthonormal set of 
eigenvectors of R, with respective eigenvalues e l ®^\ 0((3) G (— ir, n]. 
For any 6 > 0, let P e = Ep,\e(p)\<e IWI- V A H = 0, then 

||p nH||<f||H|| . 
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Proof. The claim can be shown via Jordan's Lemma [Jor75]; we give a direct proof. Let \v) = 
Pel%), \v'} = (2A - l)\v) and \v") = (211 - l)\v') = R\v). When 6 is small, \v) and \v") are close: 

W\v)-\v")f = \ £ (l-e ie(/3) )(/3b)|/?)|| 2 <2(l-cosG)|||t;)|| 2 <e 2 ||b)|| 2 . 
P-W)\<Q 

Notice that \v) + \v') is fixed by A. Similarly, IT fixes \v') + \v") and LT = 1 — LT fixes — \v"). 
Hence = (v + v'\w) = {v + v'\H\w) + (v + v'\U\w) = (v + v"\Tl\w) + (v — v"\U\w). Therefore, 
|||v)|| 2 = |(v|n|u;)| = §|(t;-u"|II|u;) + (v + v"\U\w}\ = l|(u - v"\(IL - T£)\w)\. We conclude 

IIHf^llll^-KOlllKn-^HHfiiHiiiiHii . □ 

We will also use a routine that, roughly, reflects about the eigenvalue-one eigenspace of a unitary: 

Theorem 4.3 (Phase detection [Kit95, MNRS07]). For any 9, 5 > 0, there exists b = 0(log | log g) 
and, for any unitary U G a quantum circuit R(U) on'H®(C' 2 )® b that makes at mostO( loS Q S ^ ) 

controlled calls to U and U~ 1 , and such that for any eigenvector \/3) of U, with eigenvalue e ld , 
9 € (-7r,vr], 

• If = 0, then R(U)\P) (g> \0 b ) = ® \0 b ). 

• // \6\ > 0, then R{U)\p) ® |0 6 ) = ® (|0 6 ) + |^)) /or some vector uritfi 111^)11 < <5. 
Thus, if 1 7) <E H is orthogonal to all eigenvectors of U with eigenvalues e lS for \6\ < @, then 
||0R(C/) + l)|7)® |0 6 )|| <ff. 

R(U) is constructed uniformly in the parameters Q and 5, and its structure does not depend on U . 

The phase-detection procedure can be constructed using, for example, standard phase estima- 
tion [Kit95, CEMM98, NWZ09]. Phase detection is a common subroutine in quantum algorithms, 
used implicitly or explicitly in, e.g., [Sze04, ACR+10, MNRS07, RS08, MNRS09, Rei09, Reill]. 

Now we are ready to construct the algorithm to prove Theorem 4.1. Let W = 72(p — 
Let {|uay)} and {|t>zj)}, vectors in C m , be a solution to Eq. (3.1) for 72(p — c\A). The first 
step is to turn this solution into a more natural geometric object. If the input alphabet size is 
\D\ = k, let be the vectors given in Fact 2.4. Notice that we can rewrite the sum from 

Eq. (3.1) ^2 je [ n ](Aj)x,y(u x j\vyj) = Yjj-.x^yj ( u xj\ v yj) as simply the inner product between the vec- 
tors \ j)\ u xj)\^Xj) and 2 ^ A T 1 ^ Ylj \ j)\ v yj)\ u yj) • Ovu algorithm is based on these combined vectors. 

Let H be the Hilbert space for the states \p x ) and \a x ). For y £ V, let H y = 1 — J2j ® 
!/%)(/%! ® lc«- Also, define vectors \t y± ), \ip y ) E (C 2 ®H) ® (C n »C fc C m ) by 

l*w±) = ^(|0)®|/ay)±|l)®K)) 

l^w) = ^IV) - 2 li) ® 1%,) ® • 

Let A be the projection onto the orthogonal complement of the span of the vectors {\^ y )} ye .D- Then 
our algorithm is given by: 



Algorithm: On input x, let U x = (2H X — 1)(2A — 1). Apply the phase-detection 
circuit R(U X ), from Theorem 4.3, with precision G = e 2 /W and error 5 = e, on input 
state |0) <£> \p x ) \0 b ). Output the result. 
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tar; 




weights from 72 (-| A) SDP 



Figure 2: The algorithm can be interpreted as running a quantum walk on a bipartite graph with 
weighted biadjacency matrix U x + Y2 y lyX^j/l- Shown above is an example graph for the function 
f(x!X 2 ) = x 2 mapping V = {OA, OB, 1C} C {0, 1} x {A, B, C} to E = {A, B, C}. 



Note that the reflection 2H X — 1 can be computed with a query to the input oracle and its inverse — 
compute Xj, reflect in \fi Xj ), then uncompute Xj. Therefore, the algorithm uses 0(W/e 2 - log 1) input 
queries. The algorithm is based on repeated reflections. As sketched in Figure 2, the algorithm can 
also be interpreted as a quantum walk on the bipartite graph with biadjacency matrix 11^+^^ \y){ip y \ ■ 

To get some intuition for why this algorithm works, observe that the initial state |0) <S> \p x ) 
is -^(|ia;+) + \t x -)). The vector \t x+ ) has large overlap with an eigenvalue-one eigenvector of U x 
(Claim 4.4 below), whereas the cumulative squared overlap of \t x ~) with eigenvectors of U x with 
small angle is small (Claim 4.5). The phase-detection procedure therefore approximately reflects 
the \t x -) term, giving roughly -^(\t x+ ) — \t x -)) = |1) (g) \cr x ) — our target state. 

Now we give the formal analysis of the algorithm. Let {|/3)} be a complete set of eigenvectors of U x 
with corresponding eigenvalues e t9 ^\ 8 ((3) G (— 7T, 7t]. For an angle 6 > 0, let P® = Ylp-\8(B)\<B 
and P @ = 1-P&. 

Claim 4.4. ||P |W)I| 2 > 1 - ^- 

Proof. We give a state \tp) such that U x \<p) = \(p) and |(ta; + |(/9)| 2 /|||99)|| 2 > 1 — e 2 . Let 

■ . . . 1 e 2(fc- 1) . ., . , . . 

m = \tx+) + %-7= — ^ — 2^ ® l^j) ® ™ ■ 

1 je[n] 

Then |<p) is orthogonal to all \ip y ), since (^-1^+) = \ ((p y \p x ) — i&yWx)) implies 

Wv\<p) = -4=(V-lW) - \^fj Yl ( u vj\ v *j) = • 
yW 2 . ~? 

Thus A|</?) = |<p). Since II a; |i a:+ ) = |i x+ ) and (yU^I^.) = for all j G [n], also IL^) = \ip). □ 
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Claim 4.5. For all & > 0, ||P e |*x-) f < ® 2 fW 



2 /U/2 

TIT" 



+1). 



Proof. Apply Lemma 4.2 with LT = Il x and \w) = ^j^\tpx)- Then A|u>) = and \t x 

The following proposition completes the proof of Theorem 4.1: 
Proposition 4.6. If W > e, i/ien lozi/i £/ie parameters 5 = e and = e 2 /VF, 



R(U X )\Q)® \p x )®\Q h 



11) 



10" 



< 4e 



Proof. We have 

i?(^)|o>|p x >|oV|i)k*>|o 6 ) 



< 



i 

i 



+ l^-))|o 6 ) - (\t x +) - \t x -))\o b ) 



(R(U x )-l)\t x+ )\0 b ) 



1 



(R(U x ) + l)\t x .)\0 b 



By Theorem 4.3, the first term equals ^\\{R(U X ) - l)P \t x+ )\0 b )\\ < y/2\\P \t a +) \\ < V^e, by 



Claim 4.4. The second term is at most ^\\{R(U X ) + l)P e \t x -)\0 b )\\ + v^H-Pel^-) II < 775 + 



v/2 



ll' 2 



h w2_ _j_ x, by Theorem 4.3 and Claim 4.5. Now substitute our choices of parameters and use 



+ 1 < 2W 2 /e 2 to conclude the proof. 



□ 



Notice that the constant factor hidden by the big-0 notation in Theorem 4.1 is the same as the 
constant hidden in Theorem 4.3 for the number of calls to U and and is less than 100. 



4.2 Lower bound for state conversion 

We now show how 72 (p — a\ A) can be used to show query complexity lower bounds for the state- 
conversion problem. The argument has two parts. First, we show that 72(p — c|A) lower-bounds the 
complexity of exactly converting p to a. Second, we develop an output condition constraining those a' 
that are viable final Gram matrices of a successful algorithm with error e. These two parts have 
been present in all previous adversary arguments, but the separation has not been fully recognized. 

Once these two steps are finished, the lower bound naturally becomes min CT /~ sCr 72 (p — a'\A), 
where the notion of approximation is given by the output condition. This paradigm follows the use 
of approximation norms for lower bounds in communication complexity [LS07]. 

We begin with the lower bound for exact state conversion: 

Lemma 4.7. Suppose that a can be reached from p with one query. Then j2(p — o~\ A) < 2. 
Proof. Let Tj project onto the query register containing index j. For x 6 T>, let O x be the unitary 



query oracle. It satisfies O x O y Tj = Tj when Xj = yj. By assumption, a X)V = (p x \O x O y \p y ). Then 

(p - <r)x, v = (P°>\ T i\Py) ~ (px\°i°y T j\py) = Y (P*\ T j\Py) ~ (p^\°l y r j\py) ■ 
3 j--xj¥=yj 



Now define \u xj ) = (Tj\p x ),O x Tj\p x )) and \v xj ) = (Tj\p x ),-O x Tj\p x )). Then (u xj \v y j) = (p x \(l 



p y ), as desired. Furthermore, Yl , 



□ 
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Lower bounds for approximate query problems follow by combining this lemma with appropriate 
output conditions. For example, in the functional case, one can use a condition based on ioo 
distance [Amb02], or the full output condition from [BSS03]. The output condition traditionally 
used for the general adversary method is based on the 72 norm [HLS07]. This condition has the 
advantage that it is an SDP, it extends to state conversion, and, as we now show, it is tight. 

Lemma 4.8. Let {\p x }}, {\o~ x )} C H be finite sets of vectors with the same index set, and let p, a 
be their respective Gram matrices. Then 

• If Ke({p x \a x )) > y/l — e for every x, then j 2 (p — c) < 2-,/e [HLS07]. 

• If li{p — o~) < £; then there exists a unitary U such that (p x \U\a x ) > 1 — v2e for all x. 

The second item has recently been improved by [LRU] to 72 (p — o~) < e implies there exists a 
unitary U such that (p x \U\a x ) > 1 — e/2 for all x. 

Proof. For the first part of the lemma, we can factorize p — a as 

(P ~ <y) X , V = \ ((PX + 0- X \p y - O-y) + (p x - a X \Py + Vy)) . 

Thus by a triangle inequality 72 (p— o") < max Xj?/ \\p x + a x \\ \\p y — <r y \\ < 2 max y ^2 — 2Re((p y \a y )) < 
2-y/e. For the last inequality we used y/l — e > 1 — |. 

To prove the second part, let {u^} and {f^} be arbitrary factorizations of p and cr, respectively. 
As 72 (/9 — cr) < e, there exists a factorization (p — a) x ,y = (oi x \f3 y ) with || ct^ || , < ^/e. Then 

(^1%) = (Ux\uy) ~ (at x \(3 y ) 

= (u x \u y ) - -{a x \P v ) - ^(/3x\a y ) 

as p — a is Hermitian. Let p x = \{a x — (3 x ) and q x = \(a x + (3 X ). Then the previous equation implies 

((ux,Px)\(uy,Py)) = ((v x ,q x )\{v y ,q y )) . 

By unitary freedom of square roots, if AA^ = BB^ for any two matrices A and B, then AU = B for 
some unitary U. So there is a unitary U such that (u x ,p x )U = (v x ,q x ). As (a x \/3 x ) = because 
p — a has zeros on the diagonal, we have ||px|| 2 = ||fe|| 2 < e/2. 

(K,0)[/|(^,0)) = ((u x ,p x )U\(v x ,q x )} - ((u x ,0)U\(0,q x )) - ((0,p x )U\(v x ,0)) - ((0,p x )U\(0,q x )) 
> 1 + \\q x \\ 2 - \\p x \\ - \\q x \\ - \\p x \\\\q x \\ 



> 1 - V2e . □ 

Based on Lemma 4.8, we immediately derive tight SDPs for the query complexities of state 
conversion: 

Theorem 4.9. For 5 > 0, let 

qs(p, a) = min \ j 2 (p ~ cr'\ A) : 7 2 (cr' - a) < 8 \ 
q^ip, <t) = min { 72 (p - a'\A) : l2 {a> - a o S) < 5, S o 1 = 1 . 
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Then the bounded-error coherent and non-coherent state-conversion query complexities satisfy 



( > ( < hx ■,, ( />■ a ) ) £ (), ! /, a )<(){ 9£ 4 /16 (p, a) 



(4.2) 



Thus for coherent state conversion, the output condition used is 72 (o - '— a) < 5 for an appropriately 
chosen 5, and in the non-coherent case, optimization over additional garbage states is allowed. 

For well-behaved problems, i.e., problems satisfying Qi/s{p,o~) = 0(Q e (p, cr) log(l/e)J as in the 
functional case, this is true characterization. General state-conversion problems, however, do not 
necessarily satisfy this robustness condition. Just as the complexity of a boolean function can have 
a precipitous change around error 1/2, state-conversion problems can have non-continuous changes 
in complexity even around small values of e. For such problems Theorem 4.9 may not be a true 
characterization because of the gap in error parameters on the left- and right-hand sides. The 
gap in the error dependence arises from the looseness of the necessary and sufficient conditions in 
Lemma 4.8, plus the error from Theorem 4.1. We do not know if the e-dependence in Theorem 4.1 
can be improved to polylogarithmic in 1/e. 

An advantage of using the 72 output condition is that the quantities q$ and q$ c are described 
by semi-definite programs. One could define analogous quantities with other output conditions, 
however, including the "true" output condition given by Definition 2.1 and Definition 2.2. In 
this case the only slack in the characterization would arise from Theorem 4.1 and thus the error 
parameters on left- and right-hand sides would agree up to constant factors. 

Ambainis et al. [AMRR11], previously extended both the general adversary bound and the 
multiplicative adversary bound [Spa08] to the state-generation problem. A difference between our 
work and theirs is that we separate the bound for the exact problem from the output condition used 
to handle the bounded error case. [AMRR11] focus on the output condition introduced by [Spa08] 
with the multiplicative adversary method and show how to extend the additive adversary method 
with this output condition to the state generation problem, calling this the hybrid adversary method. 
They show that the hybrid adversary method dominates the general adversary method, and that 
the hybrid adversary method is dominated by the bound of [Spa08] extended to the case of state 
generation. We do not know if the hybrid adversary method also dominates the qs(J,o~) measure. 
The proof in [AMRR11] that the multiplicative method dominates the hybrid method actually shows 
that the multiplicative method for exact state generation dominates the 72 (J — o~\ A) measure, as 
explicitly shown by [LRU]. Thus the multiplicative method will dominate the J2(J — o~\A) bound 
whenever they are paired with the same output condition. 

This line of research into discrete query complexity was launched by the discovery of a continuous- 
time query algorithm for evaluating AND-OR formulas [FGG08]. We now complete the circle: 

Theorem 4.10. The bounded-error continuous-time and discrete query models are equivalent. 

Cleve et al. [CGM+09] have shown that the models are equivalent up to a sub-logarithmic factor. 
The proof of Theorem 4.10, given in Appendix B, follows from our algorithm, Theorem 4.1, together 
with the observation that the general adversary bound remains a lower bound for continuous- 
time query algorithms. The latter result has been observed by Yonge-Mallo in 2007 [YM11] and, 
independently, Landahl (personal communication). 
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5 Function composition 



In this section we show that the adversary method behaves well with respect to function composition, 
extending previous work for the boolean case [HLS07, Rei09]. Let g : C — )■ D where C C C m and 
/ : T> —> E (PC D n ) for finite sets C, D, E. Define the composed function / o g n by 

U °g n ){x) = f (g(xi, . . . , X m ), ■ ■ ■ , g(x {n _ 1)m+1 , . . . , Xmn)) ■ 

Lemma 5.1. Letting G = {o~ g { x ),g(y) 

} x , y , Adv ± (/ og")< Adv ± (/) 72 ( J - G\ A) . 

The proof of this lemma follows in the natural way. We take optimal solutions to the Adv =t (/) 
program and the 72 (J — G|A) program, and form their tensor product to construct a solution to the 
composed program. This proof strategy does not directly work for the general adversary bound — we 
crucially use the extra constraints present in the 72 (J — G\A) program. In fact, this lemma can be 
seen as a special case of the more general inequality j2(A\Z) < j2(A\Y) max.,- 7 2(Yj|Z) (Lemma A. 2). 
The proof is given in Appendix C. 

In the case where all the functions / and g have boolean inputs and outputs, a matching lower 
bound to Lemma 5.1 has been shown by H0yer et al. [HLS07]. In general, we cannot always show 
such a matching lower bound. For example, let g be a function that only outputs even numbers, 
and let / output the sum of its inputs modulo two; then / o g n is constant. We can, however, show 
a matching composition lower bound when the range of g is boolean: 

Lemma 5.2. Let g : C -»• {0, 1} and f : {0, l} n -»■ E. Then Adv ± (/ o g n ) > Adv ± (/)Adv ± ( 5 ). 

The proof is given in Appendix C. The above composition lemmas also lead to direct-sum results 
for quantum query complexity: 

Corollary 5.3. Let g : T> — >■ E, and let g n : D n — > E n consist of n independent copies of g, given 
by g n (x 1 , . . . , x n ) = (gix 1 ), . . . , g(x n )) . Then 

Q(g n ) = &{nQ(g)) ■ (5.1) 

The lower bound Adv^(g n ) > nAdv^(g) has been shown by [ACLT10]. The corresponding 
upper bound Adv ± (<7") < n Adv^(g) is a special case of Lemma 5.1, with / the identity function. 
Corollary 5.3 then follows from Theorem 1.1. Let us remark that when E = {0, 1}, the upper 
bound Q{f n ) = 0(nQ(f)) follows from the robust input recovery quantum algorithm [BNRW07, 
Theorem 3]. The same algorithm can be generalized to handle larger E. 

Acknowledgements 

We thank Jeremie Roland and Miklos Santha for many helpful conversations on these topics, and 
thank Richard Cleve and Ronald de Wolf for useful comments on an earlier draft. Part of this 
work was done while T.L. was at Rutgers University, supported by an NSF postdoctoral fellowship 
and grant CCF-0728937. R.M. acknowledges support from NSERC and NSF grant CCF-0832787. 
B.R. acknowledges support from NSERC, ARO-DTO and MITACS. 



11 



References 



[ACLT10] Andris Ambainis, Andrew M. Childs, Frangois Le Gall, and Seiichiro Tani. The 
quantum query complexity of certification. Quantum Inf. Comput., 10:181-188, 2010, 
arXiv: 0903. 1291 [quant -ph] . 

[ACR + 10] Andris Ambainis, Andrew M. Childs, Ben W. Reichardt, Robert Spalek, and Shengyu 
Zhang. Any AND-OR formula of size N can be evaluated in time N l / 2+0 ^ on a 
quantum computer. SI AM J. Comput., 39(6):2513~2530, 2010. Earlier version in 
FOCS'07. 

[Amb02] Andris Ambainis. Quantum lower bounds by quantum arguments. J. Comput. Syst. 
Sci., 64:750-767, 2002, arXiv: quant -ph/0002066. Earlier version in STOC'00. 

[AMRR11] Andris Ambainis, Lo'ick Magnin, Martin Roetteler, and Jeremie Roland. Symmetry- 
assisted adversaries for quantum state generation. In 26th IEEE Conference on Compu- 
tational Complexity, pages 167-177, 2011, arXiv: 1012 . 2112 [quant -ph]. 

[Bha07] Rajendra Bhatia. Positive Definite Matrices. Princeton University Press, Princeton, 
2007. 

[BNRW07] Harry Buhrman, Ilan Newman, Hein Rohrig, and Ronald de Wolf. Robust poly- 
nomials and quantum algorithms. Theory Comput. Syst., 40(4):379-395, 2007, 
arXiv: quant -ph/0309220. Earlier version in STACS'05. 

[BSS03] Howard Barnum, Michael Saks, and Mario Szegedy. Quantum query complexity and 
semidefmite programming. In Proc. 18th IEEE Complexity, pages 179-193, 2003. 

[BW02] Harry Buhrman and Ronald de Wolf. Complexity measures and decision tree complexity: 
A survey. Theoretical Computer Science, 288(l):21-43, 2002. 

[CCJY09] Andrew M. Childs, Richard Cleve, Stephen P. Jordan, and David Yeung. Discrete- 
query quantum algorithm for NAND trees. Theory of Computing, 5:119-123, 2009, 
arXiv : quant -ph/0702 160. 

[CEMM98] Richard Cleve, Artur Ekert, Chiara Macchiavello, and Michele Mosca. Quan- 
tum algorithms revisited. Proc. R. Soc. London A, 454(1969) :339-354, 1998, 
arXiv : quant -ph/97080 16. 

[CGM + 09] Richard Cleve, Daniel Gottesman, Michele Mosca, Rolando D. Somma, and David L. 

Yonge-Mallo. Efficient discrete-time simulations of continuous-time quantum query algo- 
rithms. In Proc. 41st ACM STOC, pages 409-416, 2009, arXiv:0811. 4428 [quant -ph] . 

[FGG08] Edward Farhi, Jeffrey Goldstone, and Sam Gutmann. A quantum algorithm 
for the Hamiltonian NAND tree. Theory of Computing, 4:169-190, 2008, 
arXiv : quant -ph/0702144. 

[HLS07] Peter H0yer, Troy Lee, and Robert Spalek. Negative weights make adversaries stronger. 
In Proc. 39th ACM STOC, pages 526-535, 2007, arXiv: quant -ph/0611054. 



12 



[Jor75] Camille Jordan. Essai sur la geometrie a n dimensions. Bulletin de la S. M. F., 
3:103-174, 1875. 



[Kit95] A. Yu. Kitaev. Quantum measurements and the Abelian stabilizer problem. 1995, 
arXiv : quant -ph/951 1026. 

[LMSS07] Nati Linial, Shahar Mendelson, Gideon Schechtman, and Adi Shraibman. Complexity 
measures of sign matrices. Combinatorica, 27:439-463, 2007. 

[Lov03] Laszlo Lovasz. Semidefinite programs and combinatorial optimization. In B. A. Reed 
and C. Linhares Sales, editors, Recent Advances in Algorithms and Combinatorics, 
volume 11 of CMS Books Math., pages 137-194. Springer, 2003. 

[LRU] Troy Lee and Jeremie Roland. A strong direct product theorem for quantum query 
complexity. 2011, arXiv: 1104.4468 [quant -ph] . 

[LS07] Troy Lee and Adi Shraibman. Lower bounds in communication complexity. Foundations 
and Trends in Theoretical Computer Science, 3(4):263-399, 2007. 

[LS09] Nati Linial and Adi Shraibman. Lower bounds in communication complexity based 
on factorization norms. Random Structures and Algorithms, 34:368-394, 2009. Earlier 
version in STOC'07. 

[LSS08] Troy Lee, Adi Shraibman, and Robert Spalek. A direct product theorem for discrepancy. 
In Proc. 23rd Conference on Computational Complexity, pages 71-80, 2008. 

[MNRS07] Frederic Magniez, Ashwin Nayak, Jeremie Roland, and Miklos Santha. Search via quan- 
tum walk. In Proc. 39th ACM STOC, pages 575-584, 2007, arXiv : quant -ph/0608026. 

[MNRS09] Frederic Magniez, Ashwin Nayak, Peter C. Richter, and Miklos Santha. On the hitting 
times of quantum versus random walks. In Proc. 20th ACM-SIAM SODA, pages 86-95, 
2009, arXiv : 0808 . 0084 [quant -ph] . 

[NWZ09] Daniel Nagaj, Pawel Wocjan, and Yong Zhang. Fast amplification of QMA. Quantum 
Inf. Comput, 9:1053-1068, 2009, arXiv: 0904. 1549 [quant -ph] . 

[Rei09] Ben W. Reichardt. Span programs and quantum query complexity: The general 
adversary bound is nearly tight for every boolean function. 2009, arXiv: 0904. 2759 
[quant -ph] . Extended abstract in Proc. 50th IEEE FOCS, pages 544-551, 2009. 

[Reill] Ben W. Reichardt. Reflections for quantum query algorithms. In Proc. 22nd ACM- 
SIAM Symp. on Discrete Algorithms (SODA), pages 560-569, 2011, arXiv : 1005 . 1601 
[quant -ph] . 

[RS08] Ben W. Reichardt and Robert Spalek. Span-program-based quantum algorithm for 
evaluating formulas. In Proc. 40th ACM STOC, pages 103-112, 2008, arXiv: 0710. 2630 
[quant -ph] . 

[Shi02] Yaoyun Shi. Quantum lower bounds for the collision and the element distinctness 
problems. In Proc. 43rd IEEE FOCS, pages 513-519, 2002, arXiv : quant -ph/01 12086. 



13 



[Spa08] 



Robert Spalek. The multiplicative quantum adversary. In Proc. 23rd IEEE Complexity, 
pages 237-248, 2008, arXiv: quant -ph/0703237. 



[Sze04] 




[Tsi87] 



[Ung08] Falk Unger. Noise in classical and quantum computation and non-locality. PhD thesis, 
University of Amsterdam and CWI, 2008. 

[YM11] David Yonge-Mallo. Adversary lower bounds in the Hamiltonian oracle model. 2011, 
arXiv: 1108.2479 [quant -ph] . 

Centre for Quantum Technologies 
E-mail address: troyjlee@gmail.com 

Institute for Quantum Computing, University of Waterloo 
E-mail address: r3mittal@uwaterloo . ca 

Institute for Quantum Computing, University of Waterloo 
E-mail address: breic@iqc.ca 

Google, Inc. 

E-mail address: spalek@google . com 

Rutgers University 

E-mail address: szegedy@cs.rutgers.edu 

A Properties of the filtered 72 norm 

For reference, we list several useful properties of the filtered 72 norm. First, we give an alternative 
formulation that explains why 72 is also known as the Schur product operator norm: 

Lemma A.l. The 72 and filtered 72 norms can equivalently be expressed by 



Proof. Both of these equations can be proven in the same way: Start with Eq. (2.1) or (3.1) for 
72(A) or 72(A|Z), respectively, and take the dual. The semi-definite program given by Eq. (2.1) is 
always strictly feasible and that of Eq. (3.1) is strictly feasible provided that whenever A X)V 7^ 
there is some j with (Zj) XtV 7^ 0, i.e., provided the maximum in (A. 2) is finite. Thus by the duality 
principle [Lov03, Theorem 3.4] the primal and dual formulations are equal and the optimum is 
achieved. □ 

Lemma A. 2. The quantity 72 (-\Z) is a norm when restricted to arguments supported on the union 
of the supports of the Zj. For matrices B,Y±, . . . ,Y n of the appropriate dimensions it satisfies: 



72(A) = max 
M 

j 2 (A\Z) = max 



{||AoM|| : ||M|| < 1} 
{||AoM|| : max\\Zj o M\\ < l} . 



(A.l) 



(A.2) 
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1. If 0, then ^{A^A}) = 1. For J the all-ones matrix, ~f 2 {A\{J}) = 72(A). 

2. ^/2(A\Z) = if and only if A = 0. ^2{A\Z) = 00, i.e., Eq. (3.1) is infeasible, if and only if 
there exists an entry (x, y) such that A xy 7^ and {Zj) XiV = for all j. 

3. Positive scalability: 7 2 (sA|Z) = |s|72(^4|Z) and j2(.A\{sZx, . . . ,sZ n }) = ^j 2 (.A\Z) for s / 0. 
4- Triangle inequality: 7 2 (A + B\Z) < 7 2 (j4|Z) + 7 2 (i?|Z). 

5. -j2(A\Z) is invariant under duplicating corresponding rows or columns of A and all Zj. 

6. ^2{A\Y [J Z) < 72(j4|Z). This is an equality if each Yi is a restriction of some Zj to a 
rectangular submatrix. 

7. Provided Y2j \Pj\ = 1> 12{A\Z) = j2(A\Z U {^2jPjZj}). (Thus the second argument iwj2(A\Z) 
can be thought of as a convex set centered at the origin, where only the extremal points matter.) 

8. If the supports of Z\ and Z2 are row- and column-disjoint, then j2(A\Z) = "f2(A\{Zi + Z2, Z3, . . . , 

9. l2 (AoB\Z) < 72(^^)72(5). 

10. 12 {A o B\{Zj o B}) < -n{A\Z) < i 2 {A\{Zj o B}) l2 (B). 

11. A composition property: 7 2 (^4|Z) < 72 (A\ Y) maxj j 2 (Yj\Z). 

12. A direct-sum property: -y 2 (A © B\{Yj © Zj}) = max{7 2 (,4|y), j 2 (B\Z)}. 

13. A tensor-product property: j 2 (A © B\Y ® Z) = ^2{A\Y)^2{B\Z) , where Y © Z = {Yi © Zj}, 
all pairwise tensor products. 

Proof. By items (2), (3) and (4), 72 (-|Z) is a norm on arguments restricted to the support of the Zj. 
The proofs of the first three properties follow easily from the definition of filtered 72 norm, Eq. (3.1). 
Therefore we begin by showing the triangle inequality, property (4). 

4. Given optimal vector solutions to Eq. (3.1) for j2(A\Z) and for j2(B\Z), simply concatenate 
corresponding vectors to obtain a solution for ^(A + B\Z), with objective value at most 
l2 (A\Z) + l2 {B\Z). 

5. Invariance of j2(A\Z) under copying rows follows by copying the associated solution vectors. 

6. Any solution to Eq. (A.2) for ^ 2 {A\Y U Z) also works for j 2 (A\Z); hence J2(A\Z) > -y 2 (A\Y U Z). 
However, if Yi is a submatrix restriction of Zj then the constraint \\Yi o M\\ < 1 is redundant 
to \\Zj o M\\ < 1; hence adding Yi to Z does not affect j2(A\Z). 

7. If maxj \\Zj o M\\ < 1, then || YljPj^j ^|| — lj a g a i n J the new constraint is redundant. 

8. Assuming without loss of generality that in a solution to j2(A\Z) the vectors \u X j) (respec- 
tively, \v y j)) are nonzero only on rows (columns) where Zj has nonzero entries, concate- 
nating the vectors for Z\ and for Z2 gives a solution to "y2(A\{Zi + Z2, Z3, . . . , Z n }). Thus 
, j2(A\{Zi + Z2, Z3, . . . , Z n }) < j 2 {A\Z). For the other direction, divide the vectors for Z\ + Z2 
according to whether they correspond to a nontrivial row or column of Z\, or of Z 2 - 
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9. Begin with an optimal solution {(u^), \v y )} to Eq. (2.1) for 72(5), and an optimal solution 
{\u x j), \v y j)} to Eq. (3.1) for j2(A\Z). The tensor products {\u x j) © \u x ), \v y j) © \vy)} give a 
solution for 72(^0 B\Z), with objective value at most j2(A\Z)'j2(B). 

10. The second inequality in property (10) works in the same way as (9); the tensor product of 
vector solutions for 72(5) and ^2(A\{Zj o B}) is a solution for j2(A\Z). The first inequality 
follows since any vector solution for ^2(A\Z) also works for 72(^4 o B\{Zj o B}). 

11. Let {\u x j), \v y j)} be an optimal solution to Eq. (3.1) for 7 2(^4|y) and for each j let {\u xi }, \v yi )} 
be an optimal solution for 7 2(Yj|Z). These vectors satisfy 

72(^|y)>max{^||K,)|| 2 ,^||M|| 2 } 72 (y,|Z)>max{^||K)|| 2 ,^|||^)|| 2 } 

j j i i 

Ax,y = ' S ^ l (Xj)x,y{ u xj\ v yj) (Xj)x,y = /^2(^i)x,y{u xi \v y 



J yil 



Combining the last two equations gives A x<y = J2i(^i)x,y^2j ( u xj\v y j)(u xi \v yi ). Thus the 
vectors ®j{\u x j)®\u xi )) and ® j{\v y j) ®\v yi )) give a solution for ^2(A\Z), with objective value at 
most max{max x J\j IIKi)fllKi>ll 2 > max y ^ij llbj/j)l| 2 |ll^>l| 2 } < 72(A\Y) maXj -y 2 (Yj\Z) . 

12. A union of the vectors for 7 2 (A|Y) and 72 (i?|Z) gives a vector solution for 7 2 (A © B\Yj © Zj). 

13. The inequality 7 2 (A© B\Y © Z) < 7 2 (^4| Y)7 2 (i3|Z) is straightforward; if {\u x i), form 
an optimal vector solution for 7 2 (^4|Y) and form an optimal vector solution for 
-y 2 (B\Z), then the vectors {u^^^) = \u xi ) © |/i aJ ) and \v( y ,i3)(i,j)) = Ki) ® Wflj) satisfy 

y~)(Yi ® ^j')(!B,a),(i/,/8)( w (x,a)(iJ)l w (i/,/3)(iJ)) = ^(^i)a;,i/ (^Ki) ^ (-^j ) q,/9 ( Maj | V$j ) = A x ^ y B a ^ 
ij i j 

and therefore give a solution for 7 2 (>1 © B\Y © Z), with objective value at most j2(A\Y)^2(B\Z) . 

For the other direction of the tensor-product inequality, let M be an optimal solution to 
the dual SDP Eq. (A. 2) for 7 2 (t4|Y) and let N be an optimal solution to the dual SDP 
for j 2 (B\Z). We claim that M © N is a solution to the dual SDP for 72 (,4 © B\Y © Z). 
Indeed, for all i,j, \\(Yi © Zj) o (M © N)\\ = ||(Y o M) © (^ o N)\\ = \\Yi o M\\\\Zj o N\\ < 1. 
The objective value is \\{A © B) o (M © JV)[| = 7 2 (A|Y)7 2 rB|Z). Thus 72 (,4| Y) 72 (.B|Z) < 

72 (,4® s|Y® z). □ 

For completeness, we also present the dual norm 72 ( • |Z). Let ^4 = ^]. Then 

72 W)= max (A,B) 
B:y 2 {B\Z)=l 



max 

Mho} 



mm 

n 



{^E( y i'^ oi ) : E y i° 1 = 1 } (A.3) 
j^Tr O : O o 1 = and Vj, O - A o ^ ^ o} . 



When A and the Zj are Hermitian, then 72 (A\Z) = min^jTr O : f2 o 1 = CI and Vj, 0, ± A o Zj ^ 0}, 
a slightly simpler form that we will use below in Appendix C. The dual norm 72 satisfies several sim- 
ilar properties to 72, such as 7%(A\Z) < 7 2 (A|Y U Z), lt{A\Z) = i%(A\Z U {Y.jPj z j}) if Ej bil = 
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1, and 7|(A®5|y®Z) = ^(A\Y)^(B\Z). It also satisfies j%(AoB\Z) = ^{A\Z o B) < 
r Y2{A\Z) r Y2(B). We leave the proofs of these claims to the reader. 

B Application to continuous- time query complexity 

The first step of the proof of Cleve et al. [CGM + 09] is to show that the continuous-time model is 
equivalent to the fractional quantum query model, up to constant factors. For completeness, we now 
show that 72(0" — p|A) remains a lower bound on the fractional query complexity, up to a constant. 
Together with our upper bound, this gives Theorem 4.10. Yonge-Mallo [YM11] recently published 
a proof from 2007 which directly shows the general adversary bound is a lower bound on the 
continuous-time query model, and this was also independently observed by Landahl (unpublished). 

Let us first describe the fractional query model. For simplicity, we restrict to the case of boolean 
input. Here the A-fractional query operator O x (X) behaves as O x {X)\i)\z) = e lXnXt \i)\z) . Thus the 
usual query operator is obtained with A = 1. The query cost is A times the number of applications 
of O x . 

As before the key step is to bound how much a single query can change the distance. 

Lemma B.l. Suppose that a can be reached from p with one X-fractional query. Then j2(p — o~\ A) < 
Avr^/2. 

Proof. Let p x be the projection of p x onto the part of the query register holding i. Then 

n 

(p - *•)«,» = E M\4) ~ <pL\*-*** i 'P KVi \fi)) 

= E (/4i/4)(( 1 - cos ( A7r ))+ i ( x i-%) sin ( A7r )) • 

Now we define positive semi-definite matrices {Pj}j£[ n ] satisfying p — a = ^ • Pj o Aj. For this let 
us define a couple of auxiliary matrices. Let Mj(x,y) = (pLlPy) and let Ej(x,y) = {e x . \e y .), where 
e\j = b + i(l — b) for b E {0, 1}. From this definition it is clear that Ej is positive semi-definite, and 
note that 

I 1 otherwise . 

Finally, we can define Pj = (1 — cos(A7r))Mj + sin(A7r)Mj o Ej. Then Pj is positive semi-definite, 
and satisfies p — a = Y^j Pj Aj. As Yljeln] Mj(x,x) = 1 for all x we can upper bound the cost 
max x Ylj<=\ri\ Pj( x i x ) °y pW = (1 — cos(A7r)) + sin(A7r). Note that p(0) = and the maximum value 
of the derivative of p(X) is iry/2. Thus for A > we have p(X) < Xiry/2. □ 

C Function composition 

In this section we prove the composition lemmas, Lemmas 5.1 and 5.2. 
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We begin with some notation. Let g : C — > D where C C G m and / : D n — > E for finite sets G, D 



and E. Let G = {8g( x ),g(y)}x,y, and F = {8f( x ),f(y)}x,y- For a string x G C n we write x = (x 



. . , x 



where each x* G C, and we let x = ^(x 1 ) • • ■ g{x n ) G D n . For a |D| n -by-|Z)| n matrix A, define a 
|C| n -by-|Cr matrix I by A x , y = A x> y. With this notation, A p = J®^" 1 ) ® (J - G) ® J®( n ~P), and 
the filtering matrices for the composed function fog 11 are Aq,^) = J®0p _1 ) ® A q (8) J®( n ~p). To 



shorten expressions like these, we will use the notation (B) p <S> ®i^ p A 



gn—p 



Proof of Lemma 5.1. The lemma is a consequence of the composition property (11) from Lemma A. 2, 



together with several other properties of the filtered 72 norm. Let F 
7 2 (r|{A fe?) o F}). We have 



J-F, so Adv ± (/o^ 



72(r|{A 



O) < 72(F|{A P o F}) max 72 (A p o F\{A M o F}) 



< 7 2(r|{A p o r}) max 72 (A p |{A (M) : g G [m]}) 



= Adv ± (/) 72 (J-G|A) . 
The last step uses 7 2 ((J - G) p (g)^ p Ji|{(A g ) p ® (g) i/p JJ, 



property (11) 
(5, 10, 6) 
(1, 13) 

72 (j-G|A) 72 (j|jr 1 . 



□ 



Proof of Lemma 5.2. For the lower bound, we will use the dual formulation of the adversary 
bound. Either by writing Eq. (3.3) as an SDP and taking the dual or by noting that Adv^(g) = 
m&x w {(J — G,W) : ^(W\ A o ( J — G)) < 1} and using Eq. (A.3), we find 



Adv (q) = maximize 

K ' n,w 

subject to 



(J,W) 

noi = n 

Tr(fi) = 1 
WoG = Q 

n ± w o Aj y 



(C.l) 



We first note some basic properties of an optimal dual solution £l,W. 
Claim C.l. Let g : C —> D, where C C C m . Then there is an optimal solution £l,W to Eq. (C.l) that 



satisfies Adv (g)fl±W >r 0. //D = {0, 1} we may a/so assume Y2 X - 



n, 



x:g(x)=l x t x 



x:g(x)=0 ^ x > x 



1 
2 ■ 



Proof. Let fl, W be an optimal solution to Eq. (C.l) and let d g = Adv ± (g) = (W, J). Note that 
d g Q + W >z if and only if d g Q, — W >z since O is diagonal and W = W o ( J — G) is bipartite. 
Suppose that d g Q. — W ^ 0. Then there exists 0^0, such that (0, W) > d g (<f>, fi). By normalizing 0, 
we may assume that (</>, Q) = 1. This shows o f2, o W is a feasible solution for g with objective 
value greater than d g , a contradiction. 

Now for the second part. We may reorder the rows and columns of 0, W so that all elements x 
with g(x) = come first, then all elements y with g(y) = 1. Then the matrices S7 ± VF o Aj have the 
form 

" X\ 

xt 



O 








o A,; 



where W 



[xt "0 ] • Thus for any c > 0, 










" X" 





C 1 - 


± 


At 
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If we did not originally have Tr(fio) = Tr(f2i) then choosing c = y Tr(Oo) ^° balance them will result 
in a solution with smaller trace, a contradiction to the optimality of f2, W. □ 

Notice that because of the second item we have that 



Adv ± (g)n x , y + W x , y = Adv ± (g)/2 (C.2) 



x,y 

g(x)=a,g{y)=b 

for any a,b £ {0, 1}. This is the main property of boolean functions we use. 

Now let df = Adv ± (/), d g = Adv ± (g), and let A, V and U, W be optimal solutions to Eq. (C.l) 
for / and g, respectively, satisfying the conditions of Claim C.l as appropriate. Our proposed solution 
to Eq. (C.l) for the composed function f o g n is the diagonal matrix d^ 1 Ao $l® ra and weight matrix 
V o (d g n + W)® n . Notice that the weight matrix satisfies the constraint F o (V o (d g Q + W)® n ) = 
as F o V = 0. 

Let us check the objective value. 

(j,(Vo(d g n + w)® n )}= Yl v ^ E Ilt'^W • ) 

a,6e{0,l} n x < y i 

f(a)^ttb) x = a >y= b 



a,6e{0,l} n » x i ,y i 

d \ n 

u g » 



The last line follows by Eq. (C.2). 

It remains to show that d n g - l A o Sl® n ±V o (d g Q + W)® n o A (m) y for all (p,q). As 
Tr(^- 1 AoO® n ) = d n - x l2 n by Claim C.l, this will complete the proof. 

We know that d g Q + W y 0, + W o A 9 ^ 0. Also A ± F o A p y follows from AiVoA p ^0 
as they are equal up to repetition of some rows and columns. Thus 



H (A ± V o A p ) o Up, + iy o A 9 ) p 8) Q9(d 9 fii + Wi) 
= d n g - l A o Q® 11 ±V o A p o f(Q + W o A q ) p (g> + Wj 

This equality follows as A xy = unless x = y, meaning that g{x l ) = g{y l ) for all i. On the other 
hand, W x % y % = if g(x l ) = g(y l ), which kills all terms involving A and W. 

Now substitute A p = (J — G) p (g^ , Ji and simplify ( J - G) o (tt + W o A g ) = (d g Q + W)oA q 
since (J - G) o = A g o = G oW = 0. Since A (m) = (A,) p (8) ® i#p J h this gives <^~ 1 A o Q® n ± 
V" o + W)® n o A (Pi g) ^ 0, as desired. □ 



19 



